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Top Stories 

• The New York Metropolitan Transportation Authority suspended all train service between 
the Rockaway Boulevard and Broad Channel Stations May 27 after discovering the theft of 
500 feet of copper May 26. - Associated Press (See item 10) 

• DHS and U.S. Department of Agriculture officials broke ground May 27 to begin 
construction of the National Bio- and Agro-Defense Facility in Kansas for study of foreign 
animal and emerging zoonotic diseases. - U.S. Department of Homeland Security (See item 

14) 

• Officials closed a portion of the Manhattan, Hermosa and Redondo Beach coastlines May 
27 as a precaution while several agencies collect samples to investigate an oil-like 
substance that washed ashore. - KAB7 Los Angeles (See item 17) 

• Crews restored telecommunication services to CenturyLink customers between Carbondale 
and Aspen May 27 after a severed a fiber-optic cable caused a 19-hour outage that 
impacted 9-1-1, cell-phone, landline, and internet services. - Aspen Times (See item 29) 
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Energy Sector 



1. May 27, Reuters - (Texas) At least three injured after tornado hits Texas gas 

drilling rig. Hemphill County authorities reported May 27 that at least 3 workers were 
injured when a tornado hit a natural gas drilling rig in Canadian, Texas, and caused 
extensive damage to its doghouses. The damage’s impact on drilling operations is 
unknown. 

Source: http://www.reuters.com/article/2015/05/28/us-oil-texas-tornado- 
idUSKBN0QD017201 50528 



For another story, see item 28 
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Chemical Industry Sector 

See item 28 
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Nuclear Reactors, Materials, and Waste Sector 

See item 28 
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Critical Manufacturing Sector 

See item 28 
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Defense Industrial Base Sector 

2. May 28, CNN - (International) Live anthrax inadvertently shipped by U.S. military. 

The U.S. Department of Defense reported May 27 that 4 laboratory workers in the U.S. 
and 22 people at a U.S. Air Force base in South Korea were placed in post-exposure 
treatment after inadvertently receiving live anthrax samples via FedEx. The facilities 
have been decontaminated and the anthrax destroyed. 

Source: http://www.cnn.com/2015/05/27/politics/live-anthrax-us-militarv-sent- 
inadvertentl y/index .html 
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Financial Services Sector 

3. May 28, Arkansas Democrat-Gazette - (Arkansas) LR man reaches a deal in IRS 
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case. The former CEO, president, and manager of Little Rock-based Global Coal LLC 
pleaded guilty May 27 to charges alleging that he fraudulently sold millions of dollars’ 
worth of non-existent refined coal tax credits since starting the company in 2010. 
Source: http://www.arkansasonline.com/news/2015/may/28/lr-man-reaches-a-deal-in- 
irs-case-20150/ 



4. May 27, Reuters - (International) World soccer rocked by U.S., Swiss arrests of 
officials for graft. Seven Federation Internationale de Football Association (FIFA) 
officials were arrested on U.S. corruption and face extradition in Switzerland May 27 
after an investigation revealed FIFA officials were allegedly apart of corruption 
involving more than $150 million in bribes over a period of 24 years. U.S. officials 
reportedly plan to make more arrests in connection to the charges and announced a 
criminal investigation into the awarding of the next two World Cups. 

Source: http://www.reuters.com/article/2015/Q5/27/soccer-fifa- 
idUSLlN0YI0U620150527 

5. May 27, The Oregonian/OregonLive - (Oregon) ‘Short Stack Bandit’ pleads guilty to 
5 Portland area bank robberies. A bank robbery suspect dubbed the “Short Stack 
Bandit” pleaded guilty May 26 to allegedly robbing 5 Portland-area banks and 
attempting to rob another from 2013-2014. 

Source: 

http://www.oregonlive.com/portland/index.ssf/2015/05/short stack bandit pleads guil 
■html 

6. May 26, NorthJersey.com - (New Jersey) Police seeking suspect in ATM thefts at 
Kearny Bank in North Arlington. Authorities are searching for a suspect that 
allegedly used a skimming device to steal over $100,000 dollars from more than 128 
customers of Kearny Bank in North Arlington in April. The bank plans to reimburse 
affected customers. 

Source: http://www.northiersey.com/news/police-seeking-suspect-in-atm-thefts-at- 
keamy-bank-in-north-arlington- 1 ,13425 19 

7. May 26, Courthouse News Service - (Texas) Ponzi man looking at eight years in stir. 
The former owner of Dallas-based GC Resources LLC pleaded guilty May 28 to 
charges connected to an alleged Ponzi scheme in which he solicited $11.8 million 
worth of investments in oil and gas wells that the company neither owned nor 
controlled and forged contracts to fool victims. 

Source: http://www.courthousenews.com/2015/05/26/ponzi-man-looking-at-eight- 
years-in-stir.htm 
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Transportation Systems Sector 

8. May 28, WHAS 11 Louisville - (Kentucky) KSP: 2 separate accidents shut down I- 
65S Wednesday afternoon. Interstate 65 south in Hardin County reopened May 28 
after being closed for several hours while crews cleared the scenes of 2 separate multi- 
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vehicle accidents that injured 2 people. 

Source: http://www.whasll.com/storv/news/local/2015/05/27/i-65-sb-shutdown-after- 
multi-vehicle-accident-in-bullitt-co/28027 87 5/ 



9. May 28, KCTV 5 Kansas City - (Missouri) Passengers stranded at KCI after plane’s 
emergency landing. United Airlines flight headed from Kansas City to Denver was 
forced to head back to Kansas City International Airport to make an emergency landing 
May 27 after losing 1 of 3 hydraulics. The plane landed safely and the 142 passengers 
have been rescheduled for other flights. 

Source: http://www.kctv5.com/story/29168983/passengers-stranded-at-kci-after-planes- 
emergency-landing 

10. May 27, Associated Press - (New York) Theft of copper cable causes major 
disruption on NYC subways. The New York Metropolitan Transportation Authority 
suspended all train service between the Rockaway Boulevard and Broad Channel 
Stations in Queens May 27 and replaced it with shuttle busses after discovering the 
theft of 500 feet of copper cables from 12 different locations along the tracks May 26. 
Source: http://abcnews.go.com/US/wireStorv/theft-copper-cable-maior-disruption-nyc- 
subways-3 1336958 

11. May 27, CNN - (Tennessee) Delta pilot orders pizza for delayed flight. Delta Air 
Lines flight headed from Philadelphia to Atlanta was diverted to Knoxville May 26 due 
to severe weather, which delayed the flight for approximately 3 hours. Delta had 106 
cancelations and 635 flights delayed May 26 for weather-related issues. 

Source: http://www.cnn.com/2015/05/27/travel/delta-pilot-orders-delayed-flight-pizza- 
feat/ 
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Food and Agriculture Sector 

12. May 27, Omaha World Herald - (Nebraska) Nebraska ag department confirms 4 th 
case of bird flu in State. Nebraska’s Department of Agriculture announced May 27 
that the highly pathogenic H5N2 avian flu tested positive in a flock of 3 million birds at 
a farm in Knox County, nearly doubling the number of chickens affected in the State. 
The flock is scheduled to be euthanized while responders are conducting tests at 
neighboring farms within a 6.2-mile radius. 

Source: http://www.omaha.com/monev/nebraska-ag-department-confirms-th-case-of- 
bird-flu-in/article 69 14e394-04ab-l Ie5-9fdd-93e0fc0eba94.html 



13. May 27, Food Safety News - (National) Natural Grocers macadamia nuts recalled 
for Salmonella risk. Lakewood-based Vitamin Cottage Natural Food Markets Inc., 
issued a recall for its Natural Grocers brand macadamia nuts May 27 after the U.S. 
Food and Drug Administration found traces of Salmonella in product samples. The 
product was distributed to 96 Natural Grocer stores nationwide. 

Source: http://www.foodsafetynews.com/2015/05/natural-grocers-macadamia-nuts- 
recalled-for-salmonella-risk/#.VWcH5yTD-Uk 
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14. May 27, U.S. Department of Homeland Security - (National) DHS and USDA break 
ground for National Bio- and Agro- Defense Facility. DHS and U.S. Department of 
Agriculture officials officially broke ground May 27 to begin construction of the 
National Bio- and Agro-Defense Facility in Manhattan, Kansas, which will act as a 
570,000 square foot biocontainment facility for the study of foreign animal and 
emerging zoonotic diseases that threaten animal agriculture and public health in the 
U.S. 

Source: http://www.dhs.gov/news/2015/05/27/dhs-and-usda-break-ground-national- 
bio-and-agro-defense-facility 

15. May 26, U.S. Food and Drug Administration - (National) Bedessee Imports Inc., 
voluntarily recalls Brown Betty Coconut Milk Power due to presence of 
undeclared milk. Bedessee Imports Inc., issued a recall May 26 of Brown Betty 
Coconut Milk Powder Mix due to an undeclared milk allergen containing Sodium 
Caseinate. The product was sold in New York, New Jersey, Connecticut, Maryland, 
North Carolina, and Florida. 

Source: http://www.fda.gov/Safety/Recalls/ucm448375.htm 
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Water and Wastewater Systems Sector 

16. May 28, WCVB 5 Boston - (Massachusetts) Water restored after major main break; 
boil order in effect. Officials issued a boil order after crews restored water to the 
Brockton area May 28 following a massive water main break that left thousands 
without service and prompted the cancelation of elective surgeries at Brockton 
Hospital, and forced early dismissal at Brockton district schools May 27. 

Source: http://www.wcvb.com/news/state-of-emergency-remains-in-effect-after-maior- 
water-main-break/33259774 

17. May 27, KABC 7 Los Angeles - (California) Manhattan, Hermosa and Redondo 
Beach coastline closed to public due to oil-like substance. Officials closed a portion 
of Manhattan, Hermosa and Redondo Beach coastlines May 27 as a precaution while 
several agencies collect samples to investigate the cause, composition, and source of an 
oil-like substance that washed ashore. 

Source: http://abc7.com/news/oil-slick-closes-large-stretch-of-manhattan-herrnosa-and- 
redondo-beaches/745 175/ 



For another story, see item 28 
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Healthcare and Public Health Sector 
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18. May 26, Chicago Sun-Times - (Illinois) Lockport pharmacist accused of $2.4M 
health care fraud scheme. Federal authorities reported May 26 that a Lockport 



pharmacist was indicted in a $2.4 million prescription drug fraud and identity theft 
scheme that allegedly targeted Medicare, Medicaid, and three major health insurers by 
using patient and physician names to file false insurance claims and sell counterfeit or 
mislabeled drugs. 

Source: http://chicago.suntimes.eom/crime/7/7 1/63777 1/lockport-pharmacist-accused- 
2-4m-health-care-fraud-scheme 

For additional stories, see items 16 and 25 
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Government Facilities Sector 

19. May 28, Kingston Daily Freeman - (New York) 9 students, 2 adults injured in 
Dutchess County crash that leaves school bus on its side. A Wappingers Falls 
School District bus was involved in a 3-vehicle accident in Poughkeepsie May 27 that 
sent 9 students, the driver of the school bus, and another driver to an area hospital. 
Source: http://www.dailyfreeman.com/general-news/20150527/9-students-2-adults- 
injured-in-dutchess-county-crash-that-leaves-school-bus-on-its-side 

20. May 27, WBTW 13 Florence - (South Carolina) All Timmonsville schools lose power, 
cancel classes. Schools in Florence School District 4 will remain closed May 28 after a 
May 27 power outage occurred that affected the entire Timmonsville Education Center. 
Source: http://www.wbtw.com/storv/29169113/all-timmonsville-schools-lose-power- 
cancel-classes 

21. May 27, Softpedia - (Florida) Florida Department of State leaks SSNs of 13,000 
people. The Florida Department of State disclosed May 22 that the personally 
identifiable information of 13,000 Florida residents on a wait list for developmental 
disability health care services from 2003 was inadvertently leaked to individuals 
requesting unredacted copies from Florida’s Bureau of Archives. The leak was 
connected to a previous breach which involved emails released by a former Florida 
governor that were taken down and processed. 

Source: http://news.softpedia.com/news/Florida-Department-of-State-Leaks-SSNs-of- 
1 3-000-People-48246 1 .shtml 

22. May 27, K1TV 4 Honolulu - (Hawaii) USS Arizona Memorial visits suspended due 
to damaged dock. The U.S. National Park Service reported May 27 that tours on the 
USS Arizona Memorial are suspended after a hospital ship damaged the memorial’s 
floating dock as it was being assisted out of Pearl Harbor by 2 tug boats. Officials have 
assessed the damage and believe that repairs will take about a week. 

Source: http://www.kitv.com/news/uss-arizona-memorial-visits-suspended-due-to- 
damaged-dock/33250346 

23. May 27, WAGT 26 Augusta - (South Carolina) Greendale Elementary preschool 
student killed in Beech Island school bus and tractor trailer accident. Officials 
reported that a student from Greendale Elementary School in Aiken County was ki lled 
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in a school bus accident May 27 after the bus driver crossed the center line and struck 
an oncoming semi-truck. The bus driver and one other student were injured and taken 
to area hospitals. 

Source: http://www.nbc26.tv/story/29165984/update-greendale-elementarv-preschool- 
student-killed-in-beech-island-school-bus-and-tractor-trailer-accident 



For another story, see item 16 
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Emergency Services Sector 

24. May 28, Brunswick News - (Georgia) Former Darien police officer indicted for 
alleged drug evidence theft. A McIntosh County Grand Jury indicted a former Darien 
police officer May 26 for violating his oath of office by allegedly stealing more than 
$1,500 worth of drugs while on duty as the evidence custodian from 2010-2014. 
Source: http://www.thebrunswicknews.com/news/former-darien-police-officer- 
indicted-for-alleged-drug-evidence-theft/article f3a792e4-99e0-557e-bl ld- 
04a44eefd2e0.html 

25. May 27, KXAS 5 Fort Worth - (Texas) Dallas man accused of stealing ambulance, 
posing as doctor. Dallas police arrested a man May 26 after he allegedly impersonated 
a physician by entering a patient’s room, and stole and crashed an ambulance from the 
Medical City Dallas Hospital. 

Source: http://www.nbcdfw.com/news/local/Dallas-Man-Accused-of-Stealing- 
Ambulance-Posing-as-Doctor-3052703 1 1 .htrnl 

For another story, see item 29 
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Information Technology Sector 

26. May 28, Softpedia - (International) Apache Cordova glitch allows tampering with 
mobile app behavior. A security researcher at Trend Micro discovered a high-severity 
security flaw in Android apps built with Apache Cordova which could allow an 
attacker to use locally compromised apps or remote web servers to inject malicious 
intent bundles by taking advantage of default behavior preferences in the Cordova 
framework. 

Source: http://news.softpedia.com/news/Apache-Cordova-Glitch-Allows-Tampering- 
with-Mobile-App-Behavior-482561.shtml 

27. May 27, Softpedia - (International) Flash Player vulnerability exploited 2 weeks 
after Adobe’s patch release. Security researchers at FireEye discovered that 
cybercriminals are targeting outdated versions of Adobe’s Flash player with drive-by 
attacks that leverage a memory corruption vulnerability to deliver the Bedep trojan, 
which initiates click-fraud activities and an infection cycle that funnels in additional 
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malware through redirects. 

Source: http://news.softpedia.com/news/Flash-Plaver-Vulnerability-Exploited-2- 
Weeks-After-Adobe-s-Patch-Release-482475.shtml 



28. May 27, Threatpost - (International) Rockwell addresses weak password protections 
in its HMI software. Rockwell Automation patched a vulnerability in its RSView32 
human machine interface (HMI) software in which an attacker with local access could 
exploit weak, outdated user-defined password encryption algorithms to reveal 
passwords and gain access to the automation environment. 

Source: https://threatpost.com/rockwell-addresses-weak-password-protections-in-its- 
hmi-software/1 13034 



Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 

29. May 27, Aspen Times - (Colorado) Crews restore telecom services to Aspen after 
19-hour outage. Crews restored telecommunications services to CenturyLink 
customers between Carbondale and Aspen May 27 after a third party contractor severed 
a fiber-optic cable causing a 19-hour outage May 26 that impacted local 9-1-1, cell- 
phone, landline, and internet services. 

Source: http://www.aspentimes.com/news/16533487-113/crews-restore-telecom- 
services-to-aspen-after- 1 9-hour 
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Commercial Facilities Sector 

30. May 28, Washington Post - (California) Suspect arrested in connection with massive 
Los Angeles apartment fire. Los Angeles police arrested a man May 26 for allegedly 
starting a December 2014 fire that left the 7-story Da Vinci Apartment complex and a 
nearby city-owned building destroyed, causing up to $90 million in damages. 

Source: http://www.washingtonpost.com/news/morning-mix/wp/2015/05/28/suspect- 
arrested-in-connection-with-a-massive-apartment-building-fire-in-downtown-los- 
angeles/?tid=hpModule 9d3add6c-8a79-l Ie2-98d9-3012clcd8dle 

31. May 28, KFMB 8 San Diego - (California) Fish Market closed after fire rips 
through restaurant during dinner rush. A grease fire that authorities believe started 
in the vent system of the Fish Market in San Diego’s Embarcardero prompted the 
restaurant’s evacuation and closure May 27. No injuries were reported and estimated 
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damages total $1.2 million. 

Source: http://www.cbs8.com/story/29174356/fire-breaks-out-at-fish-market-restaurant 

32. May 26, U.S. Department of Labor - (New York) Conway Stores again locks 

emergency exits at Bronx stores. The Occupational Safety and Health Administration 
cited California-based Southern Island Stores LLC with 5 violations at its Conway 
Stores Bronx Location for locked exits and other hazards, including an ineffective 
extermination program. Proposed fines total $80,300. 

Source: 

https://www.osha.gov/pls/oshaweb/owadisp.show document?p table=NEWS RELEA 
SES&p id=28041 
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Dams Sector 

33. May 28, WWMT 3 Grand Rapids - (Michigan) Inspectors to look over repair work at 
Gun Lake Dam Thursday AM. The Michigan Department of Environmental Equality 
was inspecting and assessing repair work on the Gun Lake dam May 28 after crews had 
to shore up a portion that failed May 27. 

Source: http://www.wwmt.com/news/features/top-stories/stories/Inspectors-to-look- 
over-repair-work-at-Gun-Lake-Damn-Thursday-AM-141490.shtml#.VWc IvlVhBc 

34. May 27, KVUE 24 Austin - (Texas) LCRA continues floodgate operations across 
Central Texas. The Lower Colorado River Authority halted floodgate operations May 
26 across Central Texas including Wirtz Dam at Lake LBJ, Starke Dam at Lake Marble 
Lalls, Lake Buchanan, Inks Lake, and Mansfield Dam on Lake Travis. 

Source: http://www.kvue.com/storv/weather/2015/05/25/lcra-launches-floodgate- 
operations-at-starke-wirtz-dams/27926007/ 

Lor another story, see item 28 



T Return to top i 



-9 - 




NTAS 

M*iii>«ilT*rT»irhfii Ail\i«i«Y X>«« 

NO ACTIVE ALERTS 
www.DHS.gov/alerts 
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About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday through Friday] 
summary of open-source published information concerning significant critical infrastructure issues. The DHS Daily 
Open Source Infrastructure Report is archived for 10 days on the Department of Homeland Security Web site: 
http://www.dhs.gov/IPDailyReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 
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Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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